Bug#1043583: systemd-boot postinst update causes EFI crash

[Maria Lisina]

HP 250 G6 (832E). This laptop's nvram is locked and any attempt to
write efi variable will result in EFI crash on kernel side.
-------------- next part --------------
Found cgroup2 on /sys/fs/cgroup/, full unified hierarchy
Found container virtualization none.
File system "/boot" is not a FAT EFI System Partition (ESP) file system.
Using EFI System Partition at /boot/efi.
Checking whether /boot/efi/EFI/systemd/ contains any files…
Directory "/boot" is not the root of the file system.
Didn't find an XBOOTLDR partition, using the ESP as $BOOT.
Loaded machine ID db85663c813b4874828982296141053e from /etc/machine-id.
Using entry token: db85663c813b4874828982296141053e
Comparing versions: "systemd-boot 252.12-1~deb12u1" == "systemd-boot 252.12-1~deb12u1
Skipping "/boot/efi/EFI/systemd/systemd-bootx64.efi", since same boot loader version in place already.
Comparing versions: "systemd-boot 252.12-1~deb12u1" == "systemd-boot 252.12-1~deb12u1
Skipping "/boot/efi/EFI/BOOT/BOOTX64.EFI", since same boot loader version in place already.
Reading EFI variable /sys/firmware/efi/efivars/Boot0000-8be4df61-93ca-11d2-aa0d-00e098032b8c.
EFI variable /sys/firmware/efi/efivars/Boot0000-8be4df61-93ca-11d2-aa0d-00e098032b8c is shorter than 4 bytes, refusing.
Reading EFI variable /sys/firmware/efi/efivars/Boot0001-8be4df61-93ca-11d2-aa0d-00e098032b8c.
Reading from "/sys/firmware/efi/efivars/Boot0001-8be4df61-93ca-11d2-aa0d-00e098032b8c" failed: Input/output error
Reading EFI variable /sys/firmware/efi/efivars/Boot0002-8be4df61-93ca-11d2-aa0d-00e098032b8c.
EFI variable /sys/firmware/efi/efivars/Boot0002-8be4df61-93ca-11d2-aa0d-00e098032b8c is shorter than 4 bytes, refusing.
Reading EFI variable /sys/firmware/efi/efivars/Boot0003-8be4df61-93ca-11d2-aa0d-00e098032b8c.
EFI variable /sys/firmware/efi/efivars/Boot0003-8be4df61-93ca-11d2-aa0d-00e098032b8c is shorter than 4 bytes, refusing.
Reading EFI variable /sys/firmware/efi/efivars/Boot2001-8be4df61-93ca-11d2-aa0d-00e098032b8c.
Reading from "/sys/firmware/efi/efivars/Boot2001-8be4df61-93ca-11d2-aa0d-00e098032b8c" failed: Input/output error
Reading EFI variable /sys/firmware/efi/efivars/Boot2002-8be4df61-93ca-11d2-aa0d-00e098032b8c.
Reading from "/sys/firmware/efi/efivars/Boot2002-8be4df61-93ca-11d2-aa0d-00e098032b8c" failed: Input/output error
Reading EFI variable /sys/firmware/efi/efivars/Boot3001-8be4df61-93ca-11d2-aa0d-00e098032b8c.
Reading from "/sys/firmware/efi/efivars/Boot3001-8be4df61-93ca-11d2-aa0d-00e098032b8c" failed: Input/output error
Reading EFI variable /sys/firmware/efi/efivars/Boot0004-8be4df61-93ca-11d2-aa0d-00e098032b8c.
open("/sys/firmware/efi/efivars/Boot0004-8be4df61-93ca-11d2-aa0d-00e098032b8c") failed: No such file or directory
Failed to create EFI Boot variable entry, skipping: Input/output error
-------------- next part --------------
[57615.451200] ------------[ cut here ]------------
[57615.451215] [Firmware Bug]: Page fault caused by firmware at PA: 0x6791e7f0
[57615.451221] WARNING: CPU: 0 PID: 31945 at arch/x86/platform/efi/quirks.c:735 efi_crash_gracefully_on_page_fault+0x51/0xf0
[57615.451232] Modules linked in: uas usb_storage ccm uinput rfcomm snd_seq_dummy snd_hrtimer snd_seq snd_seq_device cmac algif_hash algif_skcipher af_alg bnep binfmt_misc snd_sof_pci_intel_apl snd_sof_intel_hda_common soundwire_intel soundwire_generic_allocation soundwire_cadence snd_sof_intel_hda x86_pkg_temp_thermal snd_sof_pci snd_sof_xtensa_dsp intel_powerclamp snd_sof snd_sof_utils nls_ascii snd_hda_codec_hdmi nls_cp437 coretemp vfat soundwire_bus fat snd_ctl_led snd_soc_skl snd_soc_hdac_hda kvm_intel snd_hda_ext_core btusb snd_hda_codec_realtek snd_soc_sst_ipc mei_hdcp snd_soc_sst_dsp btrtl btbcm snd_soc_acpi_intel_match snd_hda_codec_generic btintel btmtk kvm snd_soc_acpi iwlmvm ledtrig_audio intel_rapl_msr irqbypass bluetooth snd_soc_core mac80211 snd_compress ghash_clmulni_intel hid_generic jitterentropy_rng libarc4 sha512_ssse3 sha512_generic aesni_intel crypto_simd snd_hda_intel ctr iwlwifi snd_intel_dspcfg snd_intel_sdw_acpi drbg cryptd snd_hda_codec rapl intel_cstate
[57615.451315]  snd_hda_core processor_thermal_device_pci_legacy processor_thermal_device cfg80211 ansi_cprng processor_thermal_rfim snd_hwdep processor_thermal_mbox ecdh_generic at24 ecc snd_pcm wdat_wdt mei_me snd_timer processor_thermal_rapl pcspkr wmi_bmof watchdog intel_rapl_common rfkill snd mei intel_xhci_usb_role_switch int340x_thermal_zone intel_soc_dts_iosf roles soundcore int3400_thermal ac acpi_thermal_rel int3406_thermal intel_pmc_core joydev sg serio_raw evdev uvcvideo videobuf2_vmalloc videobuf2_memops videobuf2_v4l2 videobuf2_common usbhid videodev hid mc loop fuse dm_mod efi_pstore configfs efivarfs ip_tables x_tables autofs4 ext4 crc16 mbcache jbd2 crc32c_generic sd_mod t10_pi crc64_rocksoft crc64 crc_t10dif crct10dif_generic i915 ahci libahci drm_buddy i2c_algo_bit xhci_pci libata drm_display_helper xhci_hcd cec rc_core scsi_mod ttm usbcore r8169 drm_kms_helper i2c_i801 realtek crct10dif_pclmul mdio_devres crct10dif_common drm crc32_pclmul crc32c_intel psmouse libphy
[57615.451411]  i2c_smbus lpc_ich scsi_common usb_common video battery button wmi fan
[57615.451423] CPU: 0 PID: 31945 Comm: kworker/u8:4 Not tainted 6.1.0-11-amd64 #1  Debian 6.1.38-4
[57615.451428] Hardware name: HP HP 250 G6 Notebook PC/832E, BIOS F.70 08/10/2022
[57615.451432] Workqueue: efi_rts_wq efi_call_rts
[57615.451438] RIP: 0010:efi_crash_gracefully_on_page_fault+0x51/0xf0
[57615.451443] Code: d5 d9 02 00 48 81 fb ff 0f 00 00 76 08 48 3d b0 55 88 b6 74 06 5b c3 cc cc cc cc 48 89 de 48 c7 c7 90 8a af b4 e8 df bf 00 00 <0f> 0b 83 3d 06 4c ff 02 0a 0f 84 11 ba 94 00 e8 0b 1e 00 00 e8 86
[57615.451447] RSP: 0018:ffffb320890cfb40 EFLAGS: 00010082
[57615.451450] RAX: 0000000000000000 RBX: 000000006791e7f0 RCX: 0000000000000000
[57615.451453] RDX: 0000000000000004 RSI: ffffffffb4b4191e RDI: 00000000ffffffff
[57615.451455] RBP: ffffb320890cfbf8 R08: 0000000000000000 R09: ffffb320890cf9b0
[57615.451457] R10: 0000000000000003 R11: ffffffffb52d43a8 R12: 0000000000000000
[57615.451459] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[57615.451462] FS:  0000000000000000(0000) GS:ffff9b8173c00000(0000) knlGS:0000000000000000
[57615.451465] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[57615.451467] CR2: 000000006791e7f0 CR3: 00000001001be000 CR4: 00000000003506f0
[57615.451470] Call Trace:
[57615.451474]  <TASK>
[57615.451480]  ? __warn+0x7d/0xc0
[57615.451484]  ? efi_crash_gracefully_on_page_fault+0x51/0xf0
[57615.451488]  ? report_bug+0xe6/0x170
[57615.451492]  ? irq_work_queue+0xa/0x50
[57615.451497]  ? handle_bug+0x41/0x70
[57615.451501]  ? exc_invalid_op+0x13/0x60
[57615.451504]  ? asm_exc_invalid_op+0x16/0x20
[57615.451510]  ? efi_crash_gracefully_on_page_fault+0x51/0xf0
[57615.451514]  page_fault_oops+0x91/0x2b0
[57615.451520]  exc_page_fault+0x70/0x170
[57615.451526]  asm_exc_page_fault+0x22/0x30
[57615.451529] RIP: 0010:0xfffffffefb052d58
[57615.451533] Code: cb 48 8b c1 48 83 c4 20 5b c3 48 8b d1 b9 04 00 00 00 e9 b7 ff ff ff cc cc cc 48 83 ec 28 48 8b 05 15 4b 00 00 4c 8d 44 24 40 <ff> 50 40 48 8b 4c 24 40 33 d2 48 85 c0 48 0f 48 ca 48 8b c1 48 83
[57615.451536] RSP: 0018:ffffb320890cfca0 EFLAGS: 00010086
[57615.451539] RAX: 000000006791e7b0 RBX: 0000000000000002 RCX: 0000000000000004
[57615.451541] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000002
[57615.451543] RBP: ffffb320890cfd70 R08: ffffb320890cfce0 R09: ffffb320890cfdd0
[57615.451545] R10: 0000000000000000 R11: fefefefefefefeff R12: 0000000000000000
[57615.451548] R13: 0000000000084fb0 R14: ffffb320890cfdd0 R15: ffffb320890cfdd8
[57615.451552]  ? load_balance+0xa9b/0xe00
[57615.451559]  ? load_new_mm_cr3+0x79/0xe0
[57615.451563]  ? __efi_call+0x28/0x30
[57615.451567]  ? efi_call_rts+0x561/0x900
[57615.451571]  ? process_one_work+0x1c7/0x380
[57615.451577]  ? worker_thread+0x4d/0x380
[57615.451581]  ? _raw_spin_lock_irqsave+0x23/0x50
[57615.451586]  ? rescuer_thread+0x3a0/0x3a0
[57615.451590]  ? kthread+0xe9/0x110
[57615.451594]  ? kthread_complete_and_exit+0x20/0x20
[57615.451598]  ? ret_from_fork+0x22/0x30
[57615.451605]  </TASK>
[57615.451606] ---[ end trace 0000000000000000 ]---
[57615.451613] efi: Froze efi_rts_wq and disabled EFI Runtime Services
[57615.451670] ------------[ cut here ]------------
[57615.451675] WARNING: CPU: 1 PID: 31944 at drivers/firmware/efi/runtime-wrappers.c:376 virt_efi_query_variable_info+0x170/0x180
[57615.451682] Modules linked in: uas usb_storage ccm uinput rfcomm snd_seq_dummy snd_hrtimer snd_seq snd_seq_device cmac algif_hash algif_skcipher af_alg bnep binfmt_misc snd_sof_pci_intel_apl snd_sof_intel_hda_common soundwire_intel soundwire_generic_allocation soundwire_cadence snd_sof_intel_hda x86_pkg_temp_thermal snd_sof_pci snd_sof_xtensa_dsp intel_powerclamp snd_sof snd_sof_utils nls_ascii snd_hda_codec_hdmi nls_cp437 coretemp vfat soundwire_bus fat snd_ctl_led snd_soc_skl snd_soc_hdac_hda kvm_intel snd_hda_ext_core btusb snd_hda_codec_realtek snd_soc_sst_ipc mei_hdcp snd_soc_sst_dsp btrtl btbcm snd_soc_acpi_intel_match snd_hda_codec_generic btintel btmtk kvm snd_soc_acpi iwlmvm ledtrig_audio intel_rapl_msr irqbypass bluetooth snd_soc_core mac80211 snd_compress ghash_clmulni_intel hid_generic jitterentropy_rng libarc4 sha512_ssse3 sha512_generic aesni_intel crypto_simd snd_hda_intel ctr iwlwifi snd_intel_dspcfg snd_intel_sdw_acpi drbg cryptd snd_hda_codec rapl intel_cstate
[57615.451746]  snd_hda_core processor_thermal_device_pci_legacy processor_thermal_device cfg80211 ansi_cprng processor_thermal_rfim snd_hwdep processor_thermal_mbox ecdh_generic at24 ecc snd_pcm wdat_wdt mei_me snd_timer processor_thermal_rapl pcspkr wmi_bmof watchdog intel_rapl_common rfkill snd mei intel_xhci_usb_role_switch int340x_thermal_zone intel_soc_dts_iosf roles soundcore int3400_thermal ac acpi_thermal_rel int3406_thermal intel_pmc_core joydev sg serio_raw evdev uvcvideo videobuf2_vmalloc videobuf2_memops videobuf2_v4l2 videobuf2_common usbhid videodev hid mc loop fuse dm_mod efi_pstore configfs efivarfs ip_tables x_tables autofs4 ext4 crc16 mbcache jbd2 crc32c_generic sd_mod t10_pi crc64_rocksoft crc64 crc_t10dif crct10dif_generic i915 ahci libahci drm_buddy i2c_algo_bit xhci_pci libata drm_display_helper xhci_hcd cec rc_core scsi_mod ttm usbcore r8169 drm_kms_helper i2c_i801 realtek crct10dif_pclmul mdio_devres crct10dif_common drm crc32_pclmul crc32c_intel psmouse libphy
[57615.451821]  i2c_smbus lpc_ich scsi_common usb_common video battery button wmi fan
[57615.451831] CPU: 1 PID: 31944 Comm: bootctl Tainted: G        W          6.1.0-11-amd64 #1  Debian 6.1.38-4
[57615.451835] Hardware name: HP HP 250 G6 Notebook PC/832E, BIOS F.70 08/10/2022
[57615.451837] RIP: 0010:virt_efi_query_variable_info+0x170/0x180
[57615.451842] Code: fe 30 29 00 48 c7 c7 d8 55 88 b6 e8 7a a7 2a 00 48 8b 1d 7b 08 90 02 48 b8 15 00 00 00 00 00 00 80 48 39 c3 0f 85 06 ff ff ff <0f> 0b e9 ff fe ff ff 66 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 55
[57615.451845] RSP: 0018:ffffb320892f3c10 EFLAGS: 00010246
[57615.451848] RAX: 8000000000000015 RBX: 8000000000000015 RCX: 0000000000000000
[57615.451851] RDX: 0000000000000001 RSI: ffffffffb4b4191e RDI: 00000000ffffffff
[57615.451853] RBP: ffffb320892f3c50 R08: 0000000000000000 R09: 0000000000000000
[57615.451855] R10: 0000000000000001 R11: 0000000000000001 R12: ffffb320892f3c48
[57615.451857] R13: ffffb320892f3c40 R14: ffff9b7f18622400 R15: ffff9b7e1bd330c0
[57615.451860] FS:  00007ff2cab2f440(0000) GS:ffff9b8173c80000(0000) knlGS:0000000000000000
[57615.451863] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[57615.451865] CR2: 00007f41a5be0000 CR3: 0000000032ef8000 CR4: 00000000003506e0
[57615.451868] Call Trace:
[57615.451870]  <TASK>
[57615.451873]  ? __warn+0x7d/0xc0
[57615.451876]  ? virt_efi_query_variable_info+0x170/0x180
[57615.451880]  ? report_bug+0xe6/0x170
[57615.451884]  ? handle_bug+0x41/0x70
[57615.451887]  ? exc_invalid_op+0x13/0x60
[57615.451890]  ? asm_exc_invalid_op+0x16/0x20
[57615.451895]  ? virt_efi_query_variable_info+0x170/0x180
[57615.451899]  efi_query_variable_store+0x6e/0x1e0
[57615.451905]  ? validate_device_path+0x20/0x20 [efivarfs]
[57615.451912]  ? efivar_validate+0x15f/0x1b0 [efivarfs]
[57615.451919]  efivar_set_variable_locked+0xa2/0xf0
[57615.451924]  efivar_entry_set_get_size+0x87/0x160 [efivarfs]
[57615.451931]  efivarfs_file_write+0xb9/0x180 [efivarfs]
[57615.451939]  vfs_write+0xc7/0x400
[57615.451946]  ksys_write+0x6b/0xf0
[57615.451950]  do_syscall_64+0x5b/0xc0
[57615.451954]  ? xfd_validate_state+0x1e/0x80
[57615.451959]  ? restore_fpregs_from_fpstate+0x40/0xc0
[57615.451963]  ? fpregs_restore_userregs+0x56/0xe0
[57615.451966]  ? exit_to_user_mode_prepare+0x147/0x1d0
[57615.451972]  ? syscall_exit_to_user_mode+0x17/0x40
[57615.451976]  ? do_syscall_64+0x67/0xc0
[57615.451979]  ? do_syscall_64+0x67/0xc0
[57615.451982]  ? syscall_exit_to_user_mode+0x17/0x40
[57615.451986]  ? do_syscall_64+0x67/0xc0
[57615.451989]  entry_SYSCALL_64_after_hwframe+0x69/0xd3
[57615.451993] RIP: 0033:0x7ff2ca717120
[57615.451996] Code: 40 00 48 8b 15 e1 9c 0d 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b7 0f 1f 00 80 3d c1 24 0e 00 00 74 17 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 58 c3 0f 1f 80 00 00 00 00 48 83 ec 28 48 89
[57615.451999] RSP: 002b:00007fff5b045758 EFLAGS: 00000202 ORIG_RAX: 0000000000000001
[57615.452003] RAX: ffffffffffffffda RBX: 00000000000000a4 RCX: 00007ff2ca717120
[57615.452006] RDX: 00000000000000a4 RSI: 0000563ae59395b0 RDI: 0000000000000003
[57615.452008] RBP: 0000563ae59395b0 R08: 0000000000000000 R09: 0000000000000000
[57615.452010] R10: 00000000000001a4 R11: 0000000000000202 R12: 0000000000000003
[57615.452012] R13: 0000000000000000 R14: 00000000fffffffe R15: 0000563ae59395b0
[57615.452017]  </TASK>
[57615.452018] ---[ end trace 0000000000000000 ]---
[57615.452041] efi: EFI Runtime Services are disabled!